Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227541	2.1	注意	VMware Linux	-	Linux Kernel の fs/proc/base.c における重要な I/O 統計を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2495	2012-12-21 16:43	2012-06-13	Show	GitHub Exploit DB Packet Storm

227542	4.9	警告	VMware Linux レッドハット	-	Linux kernel の gfs2_fallocate 関数におけるサービス運用妨害 (バグおよびシステムクラッシュ）の脆弱性	CWE-399 リソース管理の問題	CVE-2011-2689	2012-12-21 16:42	2011-07-21	Show	GitHub Exploit DB Packet Storm

227543	7.2	危険	VMware Linux	-	Linux kernel の net/sched/sch_api.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2011-2525	2012-12-21 16:41	2012-02-2	Show	GitHub Exploit DB Packet Storm

227544	7.6	危険	アップル VMware サン・マイクロシステムズヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Java Runtime Environment における脆弱性	CWE-noinfo 情報不足	CVE-2010-4422	2012-12-21 16:38	2011-02-15	Show	GitHub Exploit DB Packet Storm

227545	5.1	警告	サン・マイクロシステムズヒューレット・パッカードオラクル VMware 日立レッドハット	-	複数の Oracle 製品の Networking コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3574	2012-12-21 16:37	2010-10-12	Show	GitHub Exploit DB Packet Storm

227546	5.1	警告	サン・マイクロシステムズ VMware ヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Networking コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3573	2012-12-21 16:36	2010-10-12	Show	GitHub Exploit DB Packet Storm

227547	10	危険	サン・マイクロシステムズ VMware ヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Sound コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3572	2012-12-21 16:35	2010-10-12	Show	GitHub Exploit DB Packet Storm

227548	10	危険	サン・マイクロシステムズ VMware 日立ヒューレット・パッカードレッドハット	-	複数の Oracle 製品の 2D コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3571	2012-12-21 16:31	2010-10-12	Show	GitHub Exploit DB Packet Storm

227549	7.6	危険	サン・マイクロシステムズ VMware ヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Deployment Toolkit コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3570	2012-12-21 16:30	2010-10-12	Show	GitHub Exploit DB Packet Storm

227550	10	危険	サン・マイクロシステムズ VMware ヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Java Runtime Environment コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3569	2012-12-21 16:28	2010-10-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
311121	9.8	CRITICAL Network	-	-	The Leopard - WordPress Offload Media plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the import_set…	CWE-862 Missing Authorization	CVE-2024-10589	2024-11-12 22:56	2024-11-9	Show	GitHub Exploit DB Packet Storm

311122	9.8	CRITICAL Network	-	-	The WP Membership plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the user_profile_image_upload() function in all versions up to, and including, 1.…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2024-10547	2024-11-12 22:56	2024-11-9	Show	GitHub Exploit DB Packet Storm

311123	9.8	CRITICAL Network	-	-	The RegistrationMagic – User Registration Plugin with Custom Registration Forms plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 6…	CWE-230 Improper Handling of Missing Values	CVE-2024-10508	2024-11-12 22:56	2024-11-9	Show	GitHub Exploit DB Packet Storm

311124	4.9	MEDIUM Network	-	-	The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’ parameter in all versions up to, and including, 5.4.6 due …	CWE-89 SQL Injection	CVE-2024-9874	2024-11-12 22:56	2024-11-9	Show	GitHub Exploit DB Packet Storm

311125	6.1	MEDIUM Network	-	-	The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & rem…	CWE-79 Cross-site Scripting	CVE-2024-10876	2024-11-12 22:56	2024-11-9	Show	GitHub Exploit DB Packet Storm

311126	4.3	MEDIUM Network	-	-	The Attesa Extra plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.4.2 via the 'attesa-template' shortcode due to insufficient restrictions on which p…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2024-10688	2024-11-12 22:56	2024-11-9	Show	GitHub Exploit DB Packet Storm

311127	6.1	MEDIUM Network	-	-	The Contact Form 7 – PayPal & Stripe Add-on plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the…	CWE-79 Cross-site Scripting	CVE-2024-10683	2024-11-12 22:56	2024-11-9	Show	GitHub Exploit DB Packet Storm

311128	9.8	CRITICAL Network	-	-	The WPLMS Learning Management System for WordPress, WordPress LMS theme for WordPress is vulnerable to arbitrary file read and deletion due to insufficient file path validation and permissions checks…	CWE-22 Path Traversal	CVE-2024-10470	2024-11-12 22:56	2024-11-9	Show	GitHub Exploit DB Packet Storm

311129	5.3	MEDIUM Network	-	-	The Quform - WordPress Form Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.20.0 via the 'saveUploadedFile' function. This makes i…	CWE-200 Information Exposure	CVE-2024-8756	2024-11-12 22:56	2024-11-9	Show	GitHub Exploit DB Packet Storm

311130	6.4	MEDIUM Network	-	-	The Code Embed plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.5 via the ce_get_file() function. This makes it possible for authenticated att…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2024-10814	2024-11-12 22:56	2024-11-9	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed